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1.0 Introduction 



The VHM system envisioned here will be designed to monitor 
performance of Guidance, Navigation, and Control (GN&C) system actuators, 
effectors, and propulsion devices using a two tier hierarchy. The top level, or 
global monitor, will determine whether the actuator or effector produced the 




can then be "played back" to: review performance, troubleshoot problems 
during maintenance, and avoid unnecessary hardware 'pulls' and 



Figure 1.0-1: Overview of VHM Architecture for Shuttle RCS 
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estimators witn arbitrary initial conditions defined over a finite or infinite 
horizon have been derived. 

Chapter 2 provides background on the Shuttle RCS and Aerosurfaces, 
the two systems that provide rotational control during reentry. The various 
components comprising the RCS are introduced and the general operation of 
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providing nominally 870 lb. thrust in a vacuum. These thirty-eight jets are 
redundant, providing attitude control and limited three axis translational 



the various components. The first of these valves are the four helium isolation 
valves in each RCS pod (2 fuel, 2 oxidizer) between the helium and propellant 
tanks . There are two valves for each tank corresponding to the two redundant 
helium regulators. The valves for each tank are in parallel and serve to isolate 
the helium and propellant tanks. 


Below each of the helium isolation valves is a helium regulator. These 
regulators step down the helium pressure from about 3000 psi. to 256 psi. for 
delivery to the propellant tanks [SODB]. After the regulators, the helium lines in 
all the RCS pods rejoin and enter the Quad Check Valves. These valves are used 
to prevent the propellant from flowing back upstream into the helium supply. 
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Figure 2. ] -2: Plumbing of Forward and Rear RCS Pods 
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The forward RCS houses fourteen primary jets and two vernier jets. Each 
of the rear RCS pods contains twelve primary jets and two vernier jets. The 
Figure (2.1-3) shows the different jets on a rear pod. The jet placement on the 
forward pod is illustrated in Figure (2.1-1). 




Each RCS thruster contains the following components: fuel and oxidizer 
valves, injector head assembly, combustion chamber, nozzle and a junction box. 



existing Redundancy Management (RM) system in the Shuttle flight software. 



This software contains modules that perform tasks of: tracking available jets. 



Load] indicate that for most missions this limit is set to three cycles. The cycle 
time for the jet failed off processing is 80 ms for all major modes of flight. If a jet 
is failed off, the jet is automatically deselected and the jet selection is 
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and 20° F for the fuel. For the vernier jets the temperature limit is 30° F for both 



fuel and oxidizer except during operations on-orbit and prior to ascent where it 
is 130° F. The cycle time for jet leak monitoring is 1.92 seconds. If a jet is failed 



illustrates these various sensors. 
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and fuel leaks have occurred with similar frequency. As stated above this is the 
most common type of RCS failure. The helium regulators are also prone to 
leaking. 
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of the speedbrake is 0° to 87.2° and is rate limited at 5.0 (7s). The maximum 
deflection of the speedbrake is dependent on the position of the rudder and vice- 
versa. If one surface is at its maximum then the maximum deflection of the other 
surface is reduced. The interrelationship of the two surfaces is illustrated "in 
Figures (2.2-3) and (2.2-4). 





64.16 



an appropriate body flap deflection "restores" the vehicle dynamics as if the 
center of mass were in its nominal location. This trimming prevents saturation of 
the elevons. The range of the bodyflap is -11.7° to + 22.55° and is rate limited at 
1.3 (7s). 
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Elevons are the first surface to become effective. When onboard sensors 
measure a dynamic pressure of 10 psf. (at an altitude of approximately 265,000 
ft), roll jets are deselected and roll control is provided solely by the elevons 
(aileron deflection by differential elevon). Similarly, when the dynamic pressure 
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Figure (3.1-1) shows a nominal reentry profile. The circles represent flight 
conditions for linear models that were incorporated in this thesis. 
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Figure (3.2-1) illustrates the structure of the reentry simulation developed 
in this study. The simulation provides a testbed for evaluating the performance 
of designed estimators as well as provides realistic commands to be modeled. 

The guidance commands are fed into the reentry flight control algorithms. 
There is one control channel for each of the three axes: roll, pitch, and yaw. The 






roll and yaw flight control channels are coupled. Entry flight control takes angle 
of attack and bank requests and commands the proper aerosurface deflections 
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names of the individual blocks match the software module names in [FSSR-GNC] 
where appropriate. 
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Figure 3.3-2: Block Diagram of Entry Flight Control System 




















igure 3.3-4: Model of Pitch Controller used in SIMULINK Simulation 





















3.4 Space Shuttle Aerodynamic Reentry Model 
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axis by p. These rotations are illustrated in Figure (3.4-2). The bank angle is then 
defined as the rotation about the freestream velocity vector. Figure (3.4-3) shows 
the angles and their relationship in the stability axis frame. 

The angles are signed such that: a positive pitch rotation increases angle of 
attack (at zero sideslip), a positive yaw rotation decreases sideslip (at zero angle 




igure 3.4-3: Stability Axis Frame 



of attack), and a positive roll angle increases bank (at zero angle of attack and 
sideslip). 



It is assumed that the products of inertia Ixy and Iyz are zero because the 
-z plane is a plane of symmetry. 
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In the above equations the torque perturbations due to jet firings ( 1, 



(8-re) 


The aerodynamic torque terms, 1, m, n, are expanded into partial 
derivatives with respect to aerosurface deflection, vehicle attitude and vehicle 
rates. The system of equations is then normalized with respect to velocity and 
transformed to the stability axis frame. 

The natural separation of the linearized lateral and longitudinal dynamics 


CM 



The lateral equations of motion are combined and simplified in a manner 
similar to that of the longitudinal dynamics. 
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( 3 . 4 - 11 ) 


sm a T — cos a T 



ill 



The lateral sideslip dynamics are given by: 



Lastly, the lateral bank dynamics are given by: 


KpP + (s + — )s0 s = K 0 _ <5 r + Ka <5 a + u x cos(a T ) + u z sm(a T ) (3.4-14) 




ccj = trim angle of attack (rad) 
7= flight path angle 



through the appropriate vehicle scaling parameters. For example, M Se relates 
elevator deflection to pitching moment through (<?Sc) 


The control and stability derivatives are taken from multidimensional 
lookup tables in [Zacharias] where the derivatives are represented as functions of 
angle of attack and Mach number. 
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3.5 Aerosurface Actuator Models 

Aerosurface actuator models are developed for aileron, elevator 



Similarly the rudder dynamics are described by: 
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3.6.1 Plume Interaction 
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The jet interaction torques are quite significant and have a large 
uncertainty associated with them. Note that for pitch firings (an equal number of 
up or down jets firing simultaneously on both sides), the interaction terms cancel 
since plume interaction torques for these symmetric firings are very nearly equal 
and opposite. 



.6.2 Impingement 

Jet self-impingement moments occur when jet plumes deflect off the 
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induced by the plume interaction for the side and down firing jets produces a roll 
torque in the opposite direction of the vacuum jet torque. 



igure 3.6-3: Angular Acceleration Comparison for Up Firing Jets 



3.6.3 Increased Atmospheric Pressure 

Increasing atmospheric pressure reduces the effective thrust by limiting 
the amount of expansion in the jet nozzles. This effect is described by Equation 
(3.6-2) from [Paradiso] that was fit to NASA data in [OADB]. 
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Other delays arise from the time it takes for valves to open and close and the 
time for propellants to meet and combust. The rise time is approximately twenty 
milliseconds. The standard for scaling transient effects of the thrusters is 
chamber pressure data [OADB], Figure (3.6-5) shows a typical chamber pressure 
profile. 



Chamber Pressure 
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No other nonlinearities of the rate measuring devices were included as the 
discretization level is die dominant factor in determining the measurement noise 
introduced by a particular sensor. 
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The first simulates a 40° commanded change in bank angle. A command 
of this nature is used in turning the Shuttle as well as for descent rate control. 
Early in reentry, descent rate is controlled by the bank angle since the angle of 
attack is driven by thermal constraints. By conducting a series of roll reversals in 
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However, since it is a goal of the study to monitor the performance of the jets, the 
control algorithms have been modified to allow the RCS jets to assist the elevator 
in completing the change in angle of attack. Augmented RCS pitch control at 
these lower altitudes and higher dynamic pressures is a possibility especially in 
the event of an elevon failure. 
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4.0 Kalman Filter Based VHM 
Estimator Theory and Design 




to the monitor through the sensor measurements, and the estimation error 
approaches some minimum value. For a given estimation time, there is an 
associated estimation error, the shorter the time the greater the error. Figure 
(4.0-2) qualitatively illustrates the relationship between sensor precision, 
measurement data rate, and estimation error. 
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the mission even if the convergence time is 10 times the minimum Shuttle on- 
time. 



Taking the above tradeoffs into account, the VHM estimator for the 
Shuttle RCS example will be evaluated and designed with the following 
objectives: 

• Track the thrust produced by the most recent firing of each jet 

• Estimate thrust to within ± 10% of nominal (87 lb) for a minimum 


impulse firing 

• Record data for each firing over entire mission: 
-Jet number 
-Time of firing 
-Thrust estimate 



ON 


possible to change 



parameters as the state of the system changes. For example, when a jet is firing, 
additional process noise can be added to account for the uncertainty in the thrust. 



In Section 4.1, background and development of the Kalman filter is given. 
Section 4.2 describes the representation of the Shuttle vehicle dynamics and RCS 
systems used for the Kalman filter design. Section 4.3 presents a Kalman filter 
based estimator and its envisioned integration into the overall VHM scheme. 
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First, it is assumed that the system to be estimated is a random process 
that can be modeled in the form. 
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Note that for the expression in Equation (4.1-4) to be a covariance matrix, 
the mean of the estimation error is assumed to be zero. 



Substituting Equation (4.1-2) into Equation (4.1-5) and substituting the 
result into Equation (4.1-6) gives. 
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represents the sum of the individual error covariances of the states. By 
minimizing this sum, the length of the error vector is minimized. After taking 



After being updated with a measurement, the state estimate and its error 
covariance matrix are propagated to the next discrete step. To propagate the 
state estimate, it is multiplied by the state transition matrix. The contribution of 
w k is ignored because it is zero mean and uncorrelated with all other w's. 


To derive the propagation for the covariance matrix, the expression for the 
a priori error is formed 
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thrust produced by each jet firing. As deterministic inputs, the model has jet 
commands (which jets and time on and off) and aerosurface deflections. Jet 
plume interaction accelerations are fed forward into the filter. The state space 
representation of the vehicle dynamics assumed for the filter design is 



where, x is the filter state vector, u is the aerosurface control input, w is the 
process noise, z is the measurement (angular body rates) vector, G)pi ume is the 
plume interaction term, and v is the measurement noise. The process and 
measurement noise are assumed to be uncorrelated white noise. 
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of the firing, not the external force applied to the vehicle when the jet is off. This 
state definition was chosen to allow more rate measurements to be incorporated 
into the thrust estimate for each firing. The additional measurements are 
especially important for providing acceptable estimates of minimum impulse 
firings as discussed earlier. 



Multiple jets, firing together in the same direction from a common pod, 
produce nearly identical responses in vehicle dynamics. If the individual states 



the total force being produced. Note that multiple up and down firing jets on the 
same pod may also fire at the same time for pitch and roll control, but these 
states are not modeled for this thesis demonstration. Only one multiple jet state 
is incorporated to illustrate the treatment of multiple jets firing simultaneously in 
the same direction from the same pod. 


The discrete-time filter transition matrix is organized as shown in 
Equation (4.2-3) 
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contributions of the individual jets to the change in the rate and attitude for a 
given time step. Each of these columns is a vector constant that maps jet force 
magnitude for a particular jet into a change in vehicle state (Appendix A). This 



4.2.2 Process Noise 

The estimator will employ a simple linear model of the vehicle dynamics 
thereby neglecting nonlinearities and environmental disturbances. The addition 
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Figure 4.2-2: Angular Acceleration due to Euler Coupling 

The root mean square of the aerosurface and Euler coupling torques act on 
the rate states. The jet uncertainty acts on any jet state that is currently firing. 
Equation (4.2-5) shows the structure of the matrix multiplying the process noise. 






the Draper TAI. A measurement noise value was assigned to each of the gyro 
packages. The values in Table (4.2-1) are used for one standard deviation of 
measurement noise in units of (°/s) and are based on a range of 07s to 107s for 
Shuttle. These values are used to set the quantization level described in Section 
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where, Rk contains the magnitude of the sensor measurement noise. 
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Figure (4.3-1), shows the filter loop used for estimation of jet force. 
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the nominal thrust produced( < 87 lb). Using the Kalman filter loop described 
in Section 4.3, the time history of the estimation error is determined for different 
At's. Figure (5.1-1) shows the estimation error for a 80 ms firing resulting from 
the different time steps with the Shuttle IMU as the rate sensor. 
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impulse firing. 

Figure (5.1-2) shows that the less noisy a sensor is, the faster it reaches a 
lower steady state value. Only the Shuttle IMU and the TAI with interpolation 
(TAI2) provide the required accuracy. 




Figure (5.1-3) also shows the estimation error for a step input to an aft side 
firing jet for different sensors. Once again the precision of the rate sensor affects 
the estimator bandwidth and speed of convergence. 
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deviation (dash-dot). The center subplots show the error (solid) which is the 
difference between the estimated and actual force of the last firing, and plus and 
minus one filter error standard deviation error. The bottom subplots illustrate 
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Figure 5.1-5: Estimation of Side (32) and Up (36) Jets Firing Simultaneously 

































aieuj!iS3 jojj3 sBuuij isp 


T3 

0) rg 

CO +“» 

P. <U 


w o 
G G 


•43 G 

G o 

3 *43 

1 1 

c o £ 

rv .5 
O w 
O QJ 


3 £ 60 

u g 3 

g ,FH 3 

h ^ qj 


W , / 

§ ° 

.3 6 

Oh *h 
v O 

£ g 

5 h QJ 
o co 

A l3 

g 

-M (tf 
C/5 v 

3 W 


01 c 7; 
A •» 2 
H T3 5 
<u g 

g o 8 
.2D? 
J3 & 

P TJ C 

13 Jj 

co T3 +3 
^ O ^ 


O M 

X SB 03 

QJ .5 T* 

CO 43 £ 

3 0) <3 


13 5! 

S I 

^4 ^ 

•3 I 

8 I 

g 4 h 

•43 

y qj 
G co 

»-i QJ 

1 * 

•S t>o 

2 .a 


U QJ 
» § 
g 


QJ JS 
•£ ^ 


C G •h-, 

F a 0 ^ 


C _ 

8 8 

? - 
43 M 

^ £ 
60 Zl 

•g «U 

hi co 


Tg X 

SJ « 


O M 

8 a; 
y -M 

C Cl, 


8 u 

X c 


u. *a 
0 ^! 
« 32 

ID 2 

t 3 qj 

O > 

s I 

6 w 

B .« 

& a 

b a 

'S £ 
2 -a 

§ S 

u ^ 

p 3 

rG CO 

60 O 

♦*1 Vh 

53 94 

g 

b w 

+-» 4-» 

g a 

& & 

*H QJ 


4 i 8 


U 

G 13 


ti ?h 

.a s 

Oh 3 

<y TJ 


oj :G 
in 0 
w 43 

s .a 

.§> § 

tG ’43 


CO 

53 


-M 

£ 

.9^ 

OJ 

43 

13 

CJ 

O 

G 

G 

cu 

G 

M 

j_( 

0 

O 

M-4 

s 

to 

s 

2 

CO 

QJ 

-s 


•B « 2. 

U d VM 

£ B O 
0) 2 CO 
■e *-•' £J 

• 8 2 


CO 

QJ QJ 


o> 

r- 









The example bank command, described in Section 3.8, is executed for the 
simulation. A series of jets fire during the maneuver as documented in Table 
(5.2-1). After a jet ON command, the VHM monitor records the time of firing, 
tracks the length of the firing, and records the last estimate and filter standard 
deviation (square root of error covariance) before the filter is reset by the next jet 
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show that the estimator readily tracks the shift in thrust for this firing, with an 
error of only 6 lb. 
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The most significant deviations from zero error occur when the ailerons are in 
motion and the actuator dynamics cause a lag between the commanded and 



thoroughly ground tested to discover the many delays in a system that could 
inadvertently degrade monitoring performance. These delays should be known 
for most vehicles since they are characterized for flight control system design and 
testing. 
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Figure 5.2-4: Effect 
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Figure 5.2-5: Effect of Aerosurface Dynamics w/ Delay Added 
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For the example bank command, the estimate for individual "stand-alone" 
firings has little steady state error, but there is a significant transient that is not 
present in the nominal case. Initially the estimate is low, as the estimator is 
expecting the effect of the firing, but the thrust is still ramping up. After the jet is 









commanded OFF, the estimator converges because it is expecting no thrust, but 
the thrust is still decaying. 
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frequencies. Although the Kalman filter is guaranteed to be stable if the plant is 
stable, there is no guarantee that the error performance will be satisfactory or that 
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5.2.3.4 Plume Interaction Uncertainties 

The maximum error in the plume interaction moment prediction for the 
firing of 4 yaw jets is about 33% (calculated from [OABD]). Figure (5.2-9) and 
Table (5.2-7) show the scenario if the plume interaction term is over estimated by 
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Table 5.2-7: Output Table from VHM for Simulation w/ 33% Error in Jet Plume Interaction Term 




















































uncertainty. This section begins with an overview of the design methods in 
[Appleby], followed by the formulation of a simple thrust estimation problem. 
Lastly, performance comparisons are made between the Kalman filter and the 
. robust estimator applied to the simple example . 


6.1 H 2 and Hoc Optimal Estimators 

In this chapter, all of the estimators are continuous-time. As such, the 
estimators will use steady state gains, not the time varying gains of the last 
chapter. Consequently, the time response of the resulting filters is much slower, 
because the initial high gains introduced at the beginning of a firing in the time- 
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Setting this equal to zero and solving for P, allows the Kalman gain to be found 
through. 



or the following state space representation 


(6.1-4) 
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The cost function is the integral of the estimation error with the system 
dynamics and the bounded noise uncertainty appended with the Lagrange 







Notice that as y approaches infinity the Riccati equation of (6.1-8) becomes 
the Riccati equation for the Kalman filter. Equation (6.6-1). 


6.1.3 Structure for Robust Estimation 

The three block structure shown in Figure (6.1-1), is a general 
representation of a plant, estimator, and uncertainty used in robust estimation 
analysis and design. The example plant model will be rearranged into the three- 
block structure in the next section for implementation of the robust estimator. 
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A sufficient condition for robust performance is that 
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Figure 6.1-3: General Transfer Function Representation 


With the perturbations added and the scaling explicitly accounted for in 
the model by the term shown in Figure (6.1-3), the state space equations for 

the system are 
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of Figure (6.1-3) into a single input. This combination puts the closed loop plant 
into the form 


Rewriting G(s) as 
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Equation (6.1-22) is now in the same form as Equation (6.1-14), the closed lo< 
form solved in the previous minimax problem. 


If the state space representations of G s f(s) is given by. 





The condition for robust performance can now be restated 
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where, x is the state vector, y is the measurement vector, u is the control 
input, z is the quantity to be estimated, w is the process noise, and v is the 
measurement noise. The process and the measurement noises are the same as 
those described in Section 4.2. 



The first six states are the attitudes and rates in the stability axis frame. 
The last state represents the deviation from the nominal jet thrust. The state 
vector is given by. 
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The measurements provided from the plant to the estimator are the 
ar rates and the feedthrough nominal jet force. 



The quantity to be estimated, z, is the deviation of thrust from nominal. 
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Figure 6.2-2: Weights for Robust Desi; 



thrust error, 5F, to the estimated thrust error, AF, and the response from 5F to the 
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Figure 6.3-2: Frequency Responses from 8F to AF 








;ure 6.3-3: Frequency Responses from AF to e 


Figure (6.3-3) shows the "sensitivity" plot of the different estimators. For 
the robust design, the estimation error in steady state is slightly less than 1/10 
the total thrust, where as for the Kalman filter the error is more than 100 times 
the thrust level. Notice that there is significant error at low frequency. This error 
is a result of the different angles of attack of the different models. The different 
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Figure 6.3-4: Time Responses of Estimation Error 


The top subplot in Figure (6.3-4) shows the steady state error of the 
estimators. This plot shows the response to a single jet step firing command 
attenuated by 300 lb ( the jet turns on at t=5s, and remains on throughout 
simulation). The bottom subplot in Figure (6.3-4) shows the time response to a 
five second jet firing attenuated bv 300 lb. Notice how the Kalman fiW'c 
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i aramemc error in tne moaei representing the rigid body reentry 
dynamics introduced large errors in the Kalman filter. The errors modeled were 
uncertainty in Mach number and angle of attack. A possible method for 
reducing the sensitivity to this modeling error is the implementation of a robust 
estimator in the monitoring algorithm. A robust estimator was shown to be 



significantly less sensitive to the parametric modeling uncertainty because it 
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derived by Mangoubi that are robust to modeling and plant uncertainty. The 



Shuttle flights that have experienced jet problems would be preferable for this 
type of investigation. By filtering data from a flight with a known failure, it may 
be possible to show that information in the vehicle's dynamic response can 
identify the off-nominal jet performance. 
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allowing a greater chance for implementation of such monitoring algorithms. 



Implementation of a local VHM monitor on the Shuttle would be a more arduous 
task because of the large amount of sensor information that would have to be 
accessed. 






Cl, ^ q 

£ & jy 

|ga 

« . 42 
TJ Jr. ? 


4-* QJ <L) 

tub £ £ 

•S O TS 
d •£ c 
<q .g as 

4— * __, 4— > 

0) T) co 
QJ (U 

X ti w 

& cu 

'Z *-» «H 

S o q 

^ Q, 

!• r o 

a> * a -C3 
U co 1 = 


T3 

g 

as 

q 


as 

8 

o 

• 1— t 

cr 


fH 

q 

(X 

cS 

<d 


to 

CD 

u 

O 

M 

CD 

8 

$ 

CO 

• r4 


q 

as 

Mh 

CJ 

CD 


q 

OJ 

OS 

y 

CO 

§ 

'S 

as 

£ 

8 

oS 

os 

1 

£ 

.si 

<D 

q 

cr 

>H 

o 

6 

C 

<d 


4-J 

H 

CO 

os 

Tf 

.s 

0) 

q" 

CD 

q 

CO 

u 

CJ 

aj 

> 

o 

as 

X) 

as 


H 

a; 

u 

<u 

• rH 

V4 

as 

CJ 


•s -S 

4-> 

C U co 


, M . JN . N 

^ 


2S 3 2S 


CO Jh 
CO 0 ) 


O g 

<U 2 
Tj vC 

5 .S3 

|s 

ctf CJ 

6 S 


0) £ 
X cj 


0) ,Q 

T* ^ 

1 1 

1 s 

rt O 

6 }g 
a o 

gn PH 

U Q) 

2 £ 

2 o 


q 

o 



o 

u 



**q 

• H 

co 

O 

u 



CL 

8 



Oj 

CO 



A 




H 

£ 


X 

co 

<u 

2 


5 

CJ 

> 

8 

s 

•fl 

T 

|| 

<d 

Jh 

y 


> 

£ 

8 

•3 

cd 

CJ 

fi 

'O 


u 

f 5 

CO 

•a 


£ 




Q> QJ 

u 3 

£ & 

r-C >H 

S 2 


•J T) 

« o 

U rD 

O qj 


<U O 

« -6 
o os 

4^ 0) 

£•6 

£ 3L 

bO 03 

Mh k>> 

O ,-Q 


The cross product can then be decomposed into the product of the 
magnitude of the force vector and the perpendicular distance to the jet. This 
perpendicular distance is the difference between the position vector and its 
projection on the force vector. Figure (A-l) shows the geometric relationship of 
these vectors. 
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A ppendix C: Incorporating Parametric Uncertainty 
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The plant may now be described in a matrix shorthand format. 




One such G s f(s) is given by 



at places the eigenvalues of (a + BS"D T C + BS~‘B T X) in the left half plane. 
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